Taha Khan and building the system development mindset

Associate Teaching Professor Taha Khan is the latest addition to the Information Networking Institute (INI) faculty. Drawing from his interest in cybercrime, usable security and online censorship, Khan is thrilled to be guiding the next generation of cybersecurity experts through courses that build fundamental knowledge, critical thinking and problem-solving.

Could you tell us a little about your journey?

Khan: I spent the early years of my life in the United Kingdom before moving to Pakistan when I was about 10. There, I completed some of my schooling as well as my undergraduate degree in electrical engineering at the Lahore University of Management Sciences. In my final year of undergrad, I had a couple of free electives available, and there was a networking security course offered. It was a computer science course, but I had the prerequisites to take it. That course was a pivotal moment for me. It's how I decided to work on research projects in cybersecurity. Eventually, I moved to the United States in 2014 to pursue my Ph.D. in Computer Science at the University of Illinois at Chicago.

What are your areas of focus?

Khan: I focus on security and privacy, looking at how we can use data-driven methods to understand the human side of security. My work involves things like quantifying cybercrime and designing systems that strike the right balance between security and usability. I’m also really interested in how topics like internet censorship connect with cybersecurity and online freedom. As an educator, I’m always curious about finding new ways to help our students learn better. The Eberly Center here at Carnegie Mellon University (CMU) is an amazing resource, and I’m really excited to work with them.

How did you come to the INI?

Khan: I was actively seeking academic positions, and my family wanted to be in a bigger city. I learned about the INI, went through the interview process and had a really amazing experience. Everyone was very welcoming and supportive, and I decided to join CMU and become a part of the INI community. The folks — both the faculty and staff — at the INI were the primary reason I chose to join.

How did you become interested in cybersecurity?

Khan: My interest in cybersecurity has been an evolving journey, shaped by great mentors and by staying connected to the vibrant academic community around it. I’ve been lucky to work with some incredibly passionate people whom I genuinely enjoyed learning from.

It all really started when I took my first course in network security. That one small decision ended up changing the direction of my career. What excites me most now is seeing just how critical cybersecurity has become, especially as we rely more and more on Artificial Intelligence (AI) and other emerging technologies, from Wi-Fi-connected vacuums to self-driving cars.

At the INI, which courses do you teach?

Khan: This fall, I’m teaching 14-513: Introduction to Computer Systems. The course was originally designed here at CMU 20 years ago, and has since been adopted by hundreds of institutions worldwide. I actually took a version of this course both as an undergraduate and in graduate school. I’ve also taught a similar version at my previous institution.

The course takes an empirical systems-based approach with the goal of efficiency in mind. We teach students fundamentals like understanding how a computer works at a low level, including assembly language. They also gain extensive experience programming in C and implement various computer efficiency artifacts, such as a memory allocator and cache optimizers.

One of the most valuable aspects of this course, in my opinion, is that it helps students develop a systems mindset. They learn best practices on how to implement efficient programs and optimize existing ones. This process also allows them to develop critical thinking and problem-solving skills that go beyond the direct programming experience they gain in that course.

In the future, I’d love to teach courses on usable security, secure coding, browser security, storage systems and networking and the internet. Given my research interests, I look forward to designing courses on internet and cybercrime measurement, as well as on online censorship.

Why did you decide to teach?

Khan: I think a critical moment for me in deciding whether to pursue academia or industry was the summer of 2019. During that time, I had the opportunity to teach my first real course. It was a practicum course where students learned basic C programming. That same summer, I also had an industry internship, and that experience helped me realize which I enjoyed more.

Also, I have been fortunate to have great mentors throughout undergrad and grad school, including my mother, who is also a university professor and has taught for 35 years. Having a good mentor can truly be life-changing, and that’s a big part of why I wanted to become an educator myself. Hopefully, I can be that kind of mentor for someone else and have a positive impact on their life. It’s also incredibly rewarding to see students succeed after graduation and move on to new phases of their lives.

What are you looking forward to most about teaching at the INI?

Khan: INI students are amazing. I’m passionate about helping them build skills and become the best versions of themselves. They’re also very inquisitive and ask a lot of questions, which I appreciate because it gives me new perspectives. I’m excited to work with them and support their growth as they embark on their journey of graduate studies.

When you think about the advancements in the field, what are you most concerned about? 

Khan: AI is the big keyword these days, and what I’m most concerned about is its safe and effective use. There are definitely some positive use cases where it can be leveraged to enhance security, but at the same time, AI’s own safety and effectiveness rely on training with large datasets. How those datasets are collected and used for continuous retraining has implications. The pace at which AI is developing is outpacing the current regulatory framework, and we’re not really keeping security at the forefront. That’s a bit of a concern if we keep going down this route.

It all ties back to safety! We want people to have a positive experience with AI and be able to use it in a productive, sustainable and economical way that supports human and AI coexistence.

What are you most excited about?

Khan: I'm excited to be part of this technological transition we are going through. It’s a real privilege to be here at CMU during this time. We are seeing so many ways AI is becoming integrated into education and transforming how we teach and how students learn. In my area, the question is: how do we help students see there is still value in learning and doing things themselves, while also teaching them how to use these tools effectively? Because in real life, they will need to use them.

What advice do you have for students?

Khan: Stay curious and embrace lifelong learning, no matter what is happening around you. Be adaptable and open to new ideas. The field of computer science and engineering is rapidly evolving, with new developments. Instead of working in silos, explore interdisciplinary areas. That is how I see the future — very interdisciplinary.